<html>
    <head>
      <base href="https://bugs.freedesktop.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW --- - segfault in brw_update_renderbuffer_surface on i965 from multiple apps"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=61724">61724</a>
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>intel-gfx-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>segfault in brw_update_renderbuffer_surface on i965 from multiple apps
          </td>
        </tr>

        <tr>
          <th>QA Contact</th>
          <td>intel-gfx-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>major
          </td>
        </tr>

        <tr>
          <th>Classification</th>
          <td>Unclassified
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>mike@vee.net
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>DRM/Intel
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>DRI
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Multiple apps are getting a segfault in brw_update_renderbuffer_surface,
including VLC, Compiz and Gazebo (which uses OGRE).

Ubuntu bug is reported here with a number of stack traces:

<a href="https://bugs.launchpad.net/ubuntu/+source/mesa/+bug/947544">https://bugs.launchpad.net/ubuntu/+source/mesa/+bug/947544</a>

I'll attach a complete, more recent one in a moment, but the head looks like
this:

#0  brw_update_renderbuffer_surface (brw=0x403eb30, rb=0x4510500, unit=0) at
brw_wm_surface_state.c:1109
#1  0x00007fffdc0e9ab0 in brw_update_renderbuffer_surfaces (brw=0x403eb30) at
brw_wm_surface_state.c:1205
#2  0x00007fffdc0d3b02 in brw_upload_state (brw=brw@entry=0x403eb30) at
brw_state_upload.c:498
#3  0x00007fffdc0c11a7 in brw_try_draw_prims (max_index=4294967295,
min_index=4294952344, ib=<optimised out>, 
    nr_prims=<optimised out>, prim=0x7fffffffc580, arrays=<optimised out>,
ctx=0x403eb30) at brw_draw.c:493
#4  brw_draw_prims (ctx=0x403eb30, prim=0x7fffffffc580, nr_prims=<optimised
out>, ib=<optimised out>, 
    index_bounds_valid=<optimised out>, min_index=4294967295,
max_index=4294967295, tfb_vertcount=0x0) at brw_draw.c:589
#5  0x00007fffd73a43da in vbo_handle_primitive_restart (ctx=<optimised out>,
prim=<optimised out>, nr_prims=<optimised out>, 
    ib=<optimised out>, index_bounds_valid=<optimised out>,
min_index=<optimised out>, max_index=4294967295)
    at ../../../../../src/mesa/vbo/vbo_exec_array.c:570
#6  0x00007fffd73a53b4 in vbo_validated_drawrangeelements
(ctx=ctx@entry=0x403eb30, mode=mode@entry=4, 
    index_bounds_valid=index_bounds_valid@entry=0 '\000',
start=start@entry=4294967295, end=end@entry=4294967295, 
    count=count@entry=39690, type=type@entry=5123, indices=indices@entry=0x0,
basevertex=basevertex@entry=0, 
    numInstances=numInstances@entry=1, baseInstance=baseInstance@entry=0) at
../../../../../src/mesa/vbo/vbo_exec_array.c:867
#7  0x00007fffd73a5724 in vbo_exec_DrawElements (mode=4, count=39690,
type=5123, indices=0x0)
    at ../../../../../src/mesa/vbo/vbo_exec_array.c:997
#8  0x00007fffd4c05124 in Ogre::GLRenderSystem::_render(Ogre::RenderOperation
const&) ()
   from /usr/lib/x86_64-linux-gnu/OGRE-1.7.4/RenderSystem_GL.so</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the QA Contact for the bug.</li>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>